CVE-2024-35200

Summary

CVE-2024-35200 is a newly disclosed vulnerability affecting NGINX Plus and Open Source (NGINX OSS) when utilizing the HTTP/3 QUIC module. The issue permits undisclosed HTTP/3 requests to trigger NGINX worker processes to terminate. This could potentially lead to denial-of-service conditions or other unintended consequences. It is essential for organizations using NGINX with the HTTP/3 QUIC module to apply the forthcoming patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.